Privacy Policy

1. Data Controller

Fraggit operates the Platform and acts as the data controller for personal data described in this Policy, unless otherwise stated for specific processing activities.

2. Data We Collect

• Account data: username, display name, email address, password hash, profile information.
• Transaction data: Orders, Lots, payment-related metadata, delivery credentials (processed for order fulfillment).
• Communication data: chat messages, dispute tickets, support requests, moderation records.
• Technical data: IP address, device/browser information, session identifiers, cookies, logs.
• Security data: two-factor authentication settings, login history, fraud-prevention signals.
• User-generated content: reviews, reports, listings, and uploaded images.

3. How We Use Data

• Provide, maintain, and improve the Platform.
• Process registrations, logins, Orders, and dispute resolution.
• Send transactional emails (verification, security alerts, order updates).
• Enforce Terms, Marketplace Rules, and protect Users from fraud and abuse.
• Comply with legal obligations and respond to lawful requests.
• Analyze aggregated usage to improve performance and user experience.

4. Legal Bases for Processing

We process personal data based on one or more of the following grounds: performance of a contract (providing the Platform), your consent (where required), legitimate interests (security, fraud prevention, service improvement), and legal obligations.

5. Sharing of Data

We do not sell personal data to third parties for their independent marketing purposes.

• Other Users: profile information, listings, and Order-related data visible as part of marketplace functionality.
• Service providers: hosting, email delivery, analytics, and security vendors under contractual safeguards.
• Moderators and staff: access to data necessary for support, moderation, and dispute resolution.
• Authorities: when required by law, court order, or to protect rights, safety, and Platform integrity.

6. International Transfers

Your data may be processed in the Republic of Armenia and other countries where our service providers operate. Where required, we implement appropriate safeguards for cross-border transfers.

7. Retention

We retain personal data for as long as necessary to provide services, resolve disputes, enforce agreements, and comply with legal obligations. Account data is generally retained while your account is active and for a reasonable period thereafter.

Moderation logs, financial records, and dispute materials may be retained longer where required for legal, security, or audit purposes.

8. Security

We implement technical and organizational measures to protect personal data, including encryption in transit, access controls, and monitoring. No system is completely secure; please use a strong password and enable two-factor authentication where available.

9. Your Rights

• Request access to your personal data.
• Request correction of inaccurate data.
• Request deletion where applicable and not overridden by legal retention duties.
• Object to or restrict certain processing where provided by law.
• Withdraw consent where processing is consent-based, without affecting prior lawful processing.
• Lodge a complaint with the competent personal data protection authority in the Republic of Armenia.

10. Cookies

We use essential cookies for authentication, security, and locale preferences. Additional analytics or marketing cookies, if introduced, will be disclosed with appropriate consent mechanisms where required.

11. Children

The Platform is not intended for individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us to request deletion.

12. Changes

We may update this Privacy Policy. The current version and date are shown above. Material changes will be communicated through the Platform or by email where appropriate.

13. Contact

For privacy requests or questions, contact Fraggit support through the channels listed on the Platform.